Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
File: xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft (raw, json)
Hash identifier: P3jpM527cJI7cvIHfHzn185ENZssqSussNy3qIshI94=
Subject key identifier: C0:04:12:AB:49:2B:1E:9B:9A:74:61:C9:88:39:45:FB:53:BB:A6:E7
Authority key identifier: C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4
Certificate issuer: /CN=c613276cbca6793c33457a9bf22fc10b382301f4
Certificate serial: 0199FBEC45CBD1B367CE4E642D35FFDF9F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:03:09 +0000
Manifest this update: Sun 19 Oct 2025 10:03:09 +0000
Manifest next update: Mon 20 Oct 2025 10:03:09 +0000
Files and hashes: 1: b9YzzhOPHDVo_soINWMmjLB7fhk.roa (hash: lwz89foq6Y4dt/R5BV0uIhhLjFL2sOp+mEH46qLg0yk=)
2: xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl (hash: x+5QrRU3tYiXBFZcMM/P62kN3KDfx25k+usiFtNPZQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:45:cb:d1:b3:67:ce:4e:64:2d:35:ff:df:9f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c613276cbca6793c33457a9bf22fc10b382301f4
Validity
Not Before: Oct 19 10:03:09 2025 GMT
Not After : Oct 20 10:03:09 2025 GMT
Subject: CN=c00412ab492b1e9b9a7461c9883945fb53bba6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:8d:25:bd:cf:00:a0:21:e6:39:ac:75:3c:
47:a4:0f:e6:6c:29:18:c8:2c:73:8d:1f:d2:df:0c:
81:03:5b:5e:53:21:90:12:8b:63:0a:28:5c:1a:c3:
88:1c:6e:1c:68:e8:43:40:8b:8f:2d:b4:94:4f:f6:
42:9b:01:9c:f0:55:91:db:f0:72:4c:75:b6:34:0d:
59:6d:01:8d:14:f4:3a:19:c1:5b:0b:42:af:d9:17:
13:de:aa:42:ce:b4:5e:92:27:ed:85:01:47:81:6e:
3e:b5:28:19:f8:f0:31:a5:4f:19:ff:ee:79:e2:c9:
0f:3c:fa:03:82:ba:bd:50:3d:dd:63:41:d3:37:be:
b0:61:a8:21:07:56:86:12:1b:ca:4c:00:51:08:37:
c8:88:cf:f3:7a:b8:92:bb:2c:fb:6c:f6:c8:52:0f:
ce:95:12:4a:3a:e5:d9:5b:b8:11:a4:fc:60:27:9e:
38:26:37:c2:fc:42:c3:9d:91:d4:9c:39:0a:d2:2d:
dd:3d:29:5c:cd:09:ff:e4:b0:c4:7f:74:83:d1:34:
bc:27:df:94:0c:3b:71:30:46:40:f6:2b:14:7d:79:
62:57:a4:1f:c3:56:51:18:1b:65:db:2a:71:46:5c:
54:29:b2:ac:01:e1:b4:cf:a0:42:d0:94:b8:c3:fd:
b9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:04:12:AB:49:2B:1E:9B:9A:74:61:C9:88:39:45:FB:53:BB:A6:E7
X509v3 Authority Key Identifier:
keyid:C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:57:d8:55:60:8b:24:35:6a:3b:5a:aa:ea:6d:7f:57:0e:7c:
6e:65:38:95:84:4e:25:23:a2:6d:f0:27:1d:7d:0f:3f:57:38:
63:4c:2c:4d:67:2c:d8:37:ca:38:6a:35:ed:ab:5f:b5:d0:bb:
32:47:19:7e:7e:65:e6:6c:73:60:49:75:32:67:a7:5c:02:ba:
7d:7b:af:5b:8b:a2:e7:d3:7c:5f:89:4e:cc:38:da:47:e2:e5:
1d:8f:02:09:01:e6:84:a6:df:3c:bd:73:39:18:f3:69:62:3d:
ca:ff:29:14:9a:ef:2b:c6:bf:e2:21:70:e3:6c:6f:63:fb:94:
4c:d4:f2:d7:4f:7b:a3:05:b7:24:55:ea:98:f7:f8:82:4c:19:
1a:bf:39:80:f0:48:72:8f:a3:7d:c6:a3:fe:37:2b:b5:1c:e2:
9d:24:8e:65:c3:b9:18:32:97:a9:ed:4a:e4:1b:70:9f:83:4d:
5e:df:1a:dc:ec:9a:19:37:0a:8a:2d:f9:07:fc:09:a5:bb:31:
bc:f7:41:89:79:69:a9:b1:74:a8:5e:70:46:a1:6f:51:5c:21:
f5:07:d7:ff:65:12:83:3a:d2:a5:82:63:bc:9b:76:e0:22:fa:
1b:41:a0:2c:85:8a:51:32:d4:77:cf:a1:55:68:9b:3d:62:b1:
75:cc:e2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:48 2025 by rpki-client